[Bro] http multi-part

Dk Jack dnj0496 at gmail.com
Thu Aug 24 18:55:36 PDT 2017


Hi,
I am trying to perform some analysis on the HTTP body. For regular messages
I am accumulating the http body using http_entity_data and http_end_entity
events. However, this doesn't seem to work for multi-part post message. How
do I accumulate multi-part post messages. Any help is appreciated. Thanks.

Dk.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170824/dfc5f631/attachment.html 


More information about the Bro mailing list